What happened
On June 12, 2026 (within 72 hours of OpenAI's confidential IPO filing on June 8, 2026 at $852 billion valuation), a coalition of 42 state attorneys general, led by New York AG Letitia James, issued formal subpoenas to OpenAI. The investigation covers: consumer protection concerns (advertising practices, deceptive claims), user data collection and handling practices, model safety testing and internal governance policies, protection of vulnerable populations (minors and seniors), and the company's obligations stemming from its nonprofit origins. The subpoena demands internal communications, safety-testing protocols, and user-data policies. This represents the largest coordinated multistate antitrust/consumer-protection investigation into an AI company.
Why it matters
This multistate investigation signals aggressive consumer-protection and competition scrutiny of frontier AI labs. The timing (within 72 hours of IPO filing) indicates state AGs are treating AI model deployment and data practices as material to shareholder risk. The scope (advertising, data handling, safety, vulnerable populations) mirrors FTC enforcement priorities and suggests state AGs are coordinating with federal regulators. For OpenAI specifically, the investigation opens material regulatory risk concurrent with IPO process, potentially affecting valuation, shareholder liability, and compliance obligations. For the broader AI industry, it signals that multistate AG coalitions will target frontier models, internal safety governance, and data practices. The investigation may result in consent orders, fines, or injunctions requiring model modifications or behavioral changes.
Action needed
Any frontier AI lab planning public offerings or material financing rounds should assume similar multistate AG investigations will be launched. Conduct internal audit of: (1) advertising and marketing claims (verify factual basis, avoid deceptive capability claims); (2) data-collection and user-privacy practices (map data lineage, retention, and third-party sharing); (3) internal safety-testing protocols and governance (document red-team processes, model evaluations, risk assessments); (4) policies protecting minors and seniors from harmful outputs. Prepare for multi-state discovery; establish document-retention protocols for regulatory requests. Engage antitrust and consumer-protection counsel in advance of any financing round or public offering.